Security Advisory
CVE-2014-7951
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate attackers with a direct connection to the target Android device to write to arbitrary files owned by system via a .. (dot dot) in the tar archive headers.